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using a web browser, an unregistered, unauthenitcated user requests a 
user registration page from a web application 



an application server provides a set of security registration data 
requirements for the web application 
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web application creates a request form by merging the security registration 
data requirements from the application server with user profile data 
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form sent to user 



user fills out and submits form to pass through server 
target on application server 
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application server retrieves the security 
data required to create account 



application server attempts to create 
account 
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Fig. 3 




data to failure target 



web application sends back a page 
suitable for a unregistered user 




Fig. 4 




forward form submission 
data to success target 




web application verfies and stores user 
profile data 



web application sends back a page 
suitable for a registered user 
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